A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.5 · campcodesNVD modified 2026-10-18 21:10
Affected (CPE criteria) 1
cpe:2.3:a:campcodes:courier_management_system:1.0:*:*:*:*:*:*:*
References 6
- https://github.com/lrjbsyh/CVE_Hunter/issues/8#issue-3348441601 Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.322058 Permissions Required, VDB Entry
- https://vuldb.com/?id.322058 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.640675 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.640811 Third Party Advisory, VDB Entry
- https://github.com/lrjbsyh/CVE_Hunter/issues/8#issue-3348441601 Exploit, Issue Tracking, Third Party Advisory